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Abstract 

We introduce a span program that decides si-connectivity, and generalize the span program to develop 
quantum algorithms for several graph problems. First, we give an algorithm for st-connectivity that uses 
0(ny/d) quantum queries to the n x n adjacency matrix to decide if vertices s and t are connected, under 
the promise that they either are connected by a path of length at most d, or are disconnected. We also 
show that if T is a path, a star with two subdivided legs, or a subdivision of a claw, its presence as a 
subgraph in the input graph G can be detected with 0(n) quantum queries to the adjacency matrix. Under 
the promise that G either contains T as a subgraph or does not contain T as a minor, we give O(n)-quory 
quantum algorithms for detecting T either a triangle or a subdivision of a star. All these algorithms can be 
implemented time efficiently and, except for the triangle-detection algorithm, in logarithmic space. One of 
the main techniques is to modify the st-connectivity span program to drop along the way "breadcrumbs," 
i~l which must be retrieved before the path from s is allowed to enter i. 
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Span programs are a linear-algebraic way of specifying boolean functions [KW93] . They are equivalent to 
quantum query algorithms; the least span program witness size for a boolean function is within a constant 
factor of the bounded-error quantum query complexity [Rci09, Reilla]. To date, quantum algorithms have 
been developed based on span programs for formula evaluation [RS08, Rcillb, Reillc], matrix rank [Bell la], 
subgraph detection [Bclllb, Zhull, LMS11], and the fc-distinctness problem under a certain promise [BL11]. 
In this paper we give two new applications for span programs. First, we present a new quantum algorithm 
for the si-connectivity problem, that uses exponentially less space and runs faster in many cases than the 
previous best algorithm. Second, we give a quantum algorithm for detecting arbitrary fixed paths and claws 
\Q in a graph. All of our algorithms can be implemented time efficiently. 

(N 

~S^ Quantum algorithm for deciding si-connectivity. In the (undirected) si-connectivity problem, we are 

given an undirected n-vertex graph G with two selected vertices s and i. G is given by its adjacency matrix, 
i.e., the n x n symmetric matrix (xy), where Xij = 1 if the edge (i,j) is present in the graph, and Xij = 
otherwise. The task is to determine whether there is a path from s to i in G. This problem is also known as 
^>- USTCON or UPATH. Classically, it can be solved in quadratic time by a variety of algorithms. Its randomized 

query complexity is 0(n 2 ). With more time, it can be solved in logarithmic space [Rei08, AKL+79]. 

Diirr ei al. have given a quantum algorithm for si-connectivity that makes 0(n 3 ' 2 ) queries to the adjacency 
matrix [DHHM04]. In fact, with an approach based on Boruvka's algorithm [Bor26], they solve a more 
general problem and find a minimum spanning tree in G, i.e., a cycle-free edge set of maximal cardinality 
that has minimum total weight. In particular, the algorithm outputs a list of the connected components of 
the graph. The algorithm's time complexity is also 0(n 3 ^ 2 ) up to logarithmic factors. The algorithm works 
by executing a quantum subroutine that uses O(logn) qubits and requires coherently addressable access to 
0(n log n) classical bits, or quantum RAM [GLM08]. This memory is changed classically between runs of the 
quantum subroutine. 

Our algorithm has the same time complexity as that of Diirr ei al. in the worst case, and has only 
logarithmic space complexity. Moreover, the time complexity reduces to 0(n\/d), if it is known that the 
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shortest path between s and t, if the one exists, has length at most d. (The O notation suppresses poly- 
logarithmic factors.) Note, though, that our algorithm only detects the presence of a path, and does not 
output a path. 

The algorithm has a very simple form. It works in the Hilbert space C^ 2 ', with one dimension per 
possible edge in the graph. It alternates two reflections. The first reflection applies a coherent query to the 
adjacency matrix input in order to add a phase of —1 to all edges not present in G. The second reflection is a 
reflection about all balanced flows from s to t in the complete graph K n . The second reflection is equivalent 
to reflecting about the constraints that for every vertex v ^ {s,£}, the net flow into v must be zero. This is 
difficult to implement directly because constraints for different vertices do not commute with each other. Our 
time-efficient procedure essentially works by inserting a new vertex in the middle of every edge. Balanced 
flows in the new graph correspond exactly to balanced flows in the old graph, but the new graph is bipartite. 
We reflect separately about the constraints in each half of the bipartition, and combine these reflections with 
a phase-estimation subroutine. 

Subgraph containment graph properties. Using the si-connectivity algorithm as a subroutine and 
the color-coding technique from [AYZ95], we can give an optimal algorithm for detecting the presence of 
a length-fc path in a graph G given by its adjacency matrix. Assign to each vertex of G a label or "color" 
chosen from {1, 2, . . . , k + 1}, independently and uniformly at random. Discard the edges of G except those 
between vertices with consecutive colors. Add two new vertices s and t, and join s to all vertices of color 1, 
and t to all vertices of color k + 1. If there is a path from s to t in the resulting graph H, then G contains a 
length-fe path. Conversely, if G contains a length-fc path, then with probability at least 2(k + l) _fc_1 = f2(l) 
the vertices of the path are colored consecutively, and hence s and t are connected in H . The algorithm's 
query complexity is 0(nyd) = 0(n), using d = k + 3. The previous best quantum query algorithms for 
deciding if a graph contains a length-fc path use 0(n) queries for k < 4, (^(n 3 / 2-1 /^/ 2 !- 1 )) queries for k > 9, 
and certain intermediate polynomials for 5 < k < 8 [CK11]. 

Path detection is a special case of the problem of deciding whether G contains as a subgraph a certain 
fixed graph T. Algorithms applicable to general T, with complexities depending on the number of vertices and 
their degrees in T, have been given by [MSS05, LMS11]. A useful case is when T is a triangle. Quantum query 
algorithms for triangle-finding have improved from using 0(n 3 ' 2 ) queries, by Grover's algorithm, to (^(n 1 ' 3 ) 
queries [MSS05], to 0(n 1296 ) queries [Bclllb]. Another case that has been studied is for T a subdivision of a 
claw. For detecting a {fei, fc 2 , fc 3 }-claw, i.e., the star Ki t s with three legs subdivided into paths of lengths hi, 
ki and &3, Childs and Kothari have given an 0(n 3 / 2 ~ 2 /( fel+fe2+fc3_1 ')-query algorithm if all kjS are even, with 
a similar expression if any of them is odd [CK11], The best known lower bound for all these problems is just 
£l(n) (see Proposition 4). 

Subgraph-containment properties are a special case of forbidden subgraph properties, i.e., properties 
characterized by a finite set of forbidden subgraphs. Another class of graph properties are minor-closed graph 
properties, i.e., properties that if satisfied by a graph G are also satisfied by all minors of G. Natural examples 
include whether the graph is acyclic, and whether it can be embedded in some surface. The properties of not 
containing a length-fc path or a {ki, ki, fcaj-claw are also minor closed. Robertson and Seymour have famously 
shown that any minor-closed property can be described by a finite set of forbidden minors [RS04] . They also 
have developed a cubic-time deterministic algorithm for solving any minor-closed graph property [RS95]. 
Childs and Kothari have shown that the quantum query complexity of a minor-closed graph property is 
0(n 3 / 2 ) unless the property is a forbidden subgraph property, in which case it is o(n 3 / 2 ) [CK11]. 

We make further progress on characterizing the quantum query complexity of minor-closed forbidden 
subgraph properties. In particular, we show that a minor-closed property can be solved by a quantum 
algorithm that uses 0(n) queries and 0(n) time if it is characterized by a single forbidden subgraph. The 
graph is then necessarily a collection of disjoint paths and subdivided claws. This query complexity is optimal. 
The algorithm for these cases is a generalization of the si-connectivity algorithm. It still checks connectivity 
in a certain graph built from G, but also pairs some of the edges together so that if one edge in the pair is 
used then so must be the other. Roughly, it is as though the algorithm drops breadcrumbs along the way 
that must be retrieved before the path is allowed to enter t. 



For an example of the breadcrumb technique, consider the problem of deciding whether G contains a 
triangle. We might attempt to solve this problem by first randomly coloring the vertices of G by {1, 2, 3}. 
Discard edges between vertices of the same color and make two copies of each vertex of color 1, the first 
connected to color-2 vertices and the second connected to color-3 vertices. Connect s to all the first vertices 
of color 1 and connect i to all the second vertices of color 1, and ask if s is connected to i. Unfortunately, this 
will give false positives. If G is a path of length four, with vertices colored 1, 2, 3, 1, then s will be connected 
to i even though G does not contain a triangle. To fix it, we can drop a breadcrumb at the first color-1 vertex 
and require that it be retrieved after the color-3 vertex; then the algorithm will no longer accept this path. 
The algorithm still does not work, though, because it will accept a cycle of length five colored 1,2,3,2,3. 
Since the si-connectivity algorithm works in undirected graphs, it cannot see that the path backtracked from 
color 3 to color 2; graph minors can fool the algorithm. What we can say is that in this particular case, the 
technique gives an 0(n)-query and 0(n)-time quantum algorithm that detects whether G contains a triangle 
or is acyclic, i.e., does not contain a triangle as a minor, under the promise that one of the two cases holds. 

Organization. After some necessary background, in Section 3, we present the algorithm for si-connectivity, 
and analyze its query complexity. In Section 4, we define the subgraph/not-a-minor promise problem, and 
solve it for the cases when the subgraph is a subdivided star or a triangle. In Section 4.3, though, we show 
that the technique does not work for arbitrary subgraphs. In Section 5, we present a framework for span 
program evaluation, and prove that the above algorithms can be implemented time efficiently. Finally, in 
Section 6, we generalize the reduction given above for path detection and give an 0(n)-query quantum 
algorithm for detecting as a subgraph a star with two subdivided legs. 

2 Preliminaries 

Let [n] denote the set {1, . . . , n}. Let C(A) denote the range or column space of a matrix A. 

2.1 Graph theory 

Let K n be the complete graph on n vertices, and let K mn be the complete bipartite graph on m and n 
vertices. A star is a complete bipartite graph K\ m) and a claw is the star K 13 . All graphs we consider are 
simple. 

A graph T is said to be a subgraph of a graph G, if T can be obtained from G by deleting edges and 
isolated vertices. T is said to be a minor of G, if it can be obtained from G by deleting and contracting edges, 
and deleting isolated vertices. Contracting an edge (x, y) involves replacing x and y by a new vertex that is 
adjacent exactly to the union of the neighbors of x and y. 

There is an alternative way of describing the minor relation. Let H be a graph, and {V^}, where x runs 
through all the vertices of T, be a collection of connected and pairwise disjoint subsets of the vertices of H . 
We write H = MT if the following holds: there is an edge (u, v) in T if and only if there is an edge between a 
vertex of V x and a vertex of V y in H . If this holds, the sets V x are called the branch sets of MT. A graph T 
is contained in G as a minor if and only if some MT is contained in G as a subgraph. 

2.2 Quantum computation and span programs 

We are interested in both query and time complexity of quantum algorithms. Query complexity measures 
only the number of queries to the input oracle, whereas time complexity measures the total number of gates. 
For a survey of query complexity, refer to [BW02] . 

We develop quantum algorithms based on span programs over the real numbers. 

Definition 1 (Span program [KW93]). A span program V = (n, d, |r), V/ ree , {^,&}) consists of a "target" 
vector \t) E R d and finite sets Vf ree and V^o, Vi.i, . . . , V nt o, V n ,i °f "input" vectors from R d . 

To V corresponds a boolean function f-p : {0, 1}™ — > {0, 1}, defined by f"p(x) — 1 if and only if \t) lies in 
the span of the vectors in Vf ree U lj i=1 Vi_ Xi . 



We say that the input vectors in Vt t b are labeled by the value b of the ith input variable Xi. For an 
input x = (%i) G {0, 1}™, define the available input vectors as the vectors in Vf roo U UieM ^i,xi- The other 
input vectors are called the false input vectors. Let V, V(x) and Vf roc be matrices having as columns the 
input vectors, the available input vectors and the free input vectors in Vf rcQ , respectively. The span program 
evaluates to 1 on input x if and only if \t) 6 C(V{x)). 

A useful notion of span program complexity is the witness size. 

• If V evaluates to 1 on input x, a witness for this input is a pair of vectors \w) and |wf ree ) such that 
Vfroclwfrcc) + V(x)\w) = \t) . Its witness size is defined as |||iu)|| 2 . 

• If fv{x) = 0, then a witness for x is any vector \w') € R d such that (w'\t) — 1 and \w') _L C(V(x)). 
Since \t) <£ span(V(x)), such a vector exists. The witness size of \w') is defined as ||V"t |u/)|| 2 . This 
equals the sum of the squares of the inner products of \w') with all false input vectors. 

The witness size of span program V on input x, wsize(7 : ',x), is defined as the minimal size among all 
witnesses for x. For T> C {0, l} n , let 

wsizeb(7- > ,2?) = max wsize("P, a;) . (1) 

xeV:f-p(x)=b 

Then the witness size of V on domain T> is defined as 

wsize(-p,X>) = \/wsizeo(:P,:D)wsizei(:P,:D) . (2) 

This is equivalent to the standard definition; see Eq. (2.8) in [Rci09]. 
Span programs can be converted into quantum query algorithms: 

Theorem 2 ([Rci09, Reilla]). For any boolean function /:£>—>• {0, 1}, with T> C {0, 1}™, if V is a span 
program computing f on domain T> , then there exists a quantum algorithm that evaluates f with two-sided 
bounded error using 0(wsize(V,T>)) queries. 

A proof is given in Section 5.2. Conversely, if / can be evaluated by a bounded-error quantum algorithm 
that makes Q queries, then there is a span program for / with 0(Q) witness size [Rei09]. Thus, searching for 
good quantum query algorithms is equivalent to searching for span programs with small witness size. 

3 Span program and quantum query algorithm for st-connectivity 

A key idea in our arguments will be a simple span program for deciding si-connectivity. We show: 

Theorem 3. Consider the st- connectivity problem on a graph G given by its adjacency matrix. Assume there 
is a promise that if s and t are connected by a path, then they are connected by a path of length at most d. 
Then the problem can be decided in 0{n\fd) quantum queries. 

In Section 5, we will prove that this algorithm can be implemented in 0{n\fd) time and O(logn) space. 

Proof. Define a span program V using the vector space R™, with the vertex set of G as an orthonormal basis. 
The target vector is \t) — \s). For each pair of distinct vertices {u, v}, order the vertices arbitrarily and add 
the input vector \u) — \v) labeled by the presence of the edge (u, v), i.e., \u) — \v) is available when the (u, v) 
entry of the adjacency matrix is 1. The edge orientations are not important since \v) — \u) = —(\u) — \v)). 

When s is connected to t in G, let t = Uq, u%, . . . , u m = s be a path between them of length m < d. All 
vectors \v,i) — |uj+i) are available, and their sum is \t) — \s). Thus the span program evaluates to 1. The 
witness size is at most m < d. 

Next assume that t and s are in different connected components of G. Define \w') by (w', u) = 1 if u is in 
the connected component of t, and otherwise. Then («/, t — s) = 1 and \w') is orthogonal to all available 
input vectors. Thus the span program evaluates to with \w') a witness. Since there are 0(n 2 ) false input 
vectors, and the inner product of each of them with \w') is at most 1, the negative witness size is 0(n 2 ). 

"P's witness size is thus 0{nyd). By Theorem 2, the problem's quantum query complexity is 0{nyd). □ 



It is easy to see that the problem's query complexity is 1 if d = 1 and is 0(y/n) if d = 2. If d > 3, 
and <i = 0(1), then the algorithm of Theorem 3 is optimal, which can be seen by a reduction from the unordered 
search problem. The algorithm is also optimal if d = Q(n), again by the lower bound from [DHHM04]. 

Observe that when s and t are connected, the span program's witnesses correspond exactly to balanced 
unit flows from s to t in G. The witness size of a flow is the sum over all edges of the square of the flow across 
that edge. If there are multiple simple paths from s to t, then it is therefore beneficial to spread the flow across 
the paths in order to minimize the witness size. The optimal positive witness size is the same as the resistance 
distance between s and t, R s t < d, i.e., the effective resistance, or equivalently twice the energy dissipation 
of a unit electrical flow, when each edge in the graph is replaced by a unit resistor [DS84] . Spreading the 
flow to minimize its energy is the main technique used in the analysis of quantum query algorithms based on 
learning graphs [Belllb, Zhull, LMS11, BL1I], for which this span program for si-connectivity can be seen 
to be the key subroutine. Since the negative witness size is 0(n 2 ), the overall witness size is 0(n^/maxR^t), 
where the maximum is over allowed input graphs. Notice that the hitting time from s to t for a classical 
random walk is at most 2mR s t, where m is the number of edges in G [CRR + 89]. A quantum walk that is 
given G achieves a square-root speedup in the hitting time [MNRS09, Szc04]; our algorithm is only slower by 
a factor of 0(n/y/m), even though it is charged for accessing the input graph. 



4 Subgraph/not-a-minor promise problem 

A natural strategy for deciding a minor-closed forbidden subgraph property is to take the list of forbidden 
subgraphs and test the input graph G for each subgraph one by one. Let T be a forbidden subgraph from the 
list. To simplify the problem of detecting T, we can add the promise that G either contains T as a subgraph 
or does not contain T as a minor. Call this problem the subgraph/not-a-minor promise problem for T. 

In this section, we develop an approach to the subgraph/not-a-minor problem using span programs. We 
first show that the approach achieves the optimal 0(n) query complexity in the case that T is a subdivided 
star. Then in Section 4.2 we extend the approach to give an optimal 0(n)-query algorithm for the case 
that T is a triangle. In Section 4.3, however, we show that the approach fails for the case T = K$. 

Before beginning, we state a lower bound that proves the optimality of these algorithms: 

Proposition 4. // the graph T has at least one edge, then the quantum query complexity of the subgraph/not- 
a-minor problem for T is £l(n), and the randomized query complexity is fl(n 2 ). 

Proof. This is a standard argument by a reduction from the unordered search problem; see, e.g., [BDH + 05]. 
Let H be the smallest connected component of T of size at least 2. Let H' be H with a vertex removed. Let 
G be constructed ssT\H together with n disjoint copies of H' and n isolated vertices. The graph G has 
0(n) vertices and does not contain a T-minor. 

Let Xij, for i, j £ [n], be boolean variables. Define G{x) as G with the jth isolated vertex connected to 
all vertices of the zth copy of H' , for all i,j such that Xij = 1. The graph G(x) contains T as a subgraph 
if and only if at least one Xij is 1. This gives the reduction. Unordered search on n 2 inputs requires O(n) 
quantum queries [BBHT98] and, clearly, Q(n 2 ) randomized queries. □ 

4.1 Subdivision of a star 

In this section, we give an optimal quantum query algorithm for the subgraph/not-a-minor promise problem 
for a graph T that is a subdivided star. As a special case, this implies an optimal quantum query algorithm 
for deciding minor-closed forbidden subgraph properties that are determined by a single forbidden subgraph. 

Theorem 5. Let T be a subdivision of a star. Then there exists a quantum algorithm that, given query 
access to the adjacency matrix of a simple graph G with n vertices, makes O(n) queries, and, with probability 
at least 2/3, accepts if G contains T as a subgraph and rejects if G does not contain T as a minor. 

It can be checked that if T is a path or a subdivision of a claw then a graph G contains T as a minor if 
and only if it contains it as a subgraph. Moreover, disjoint collections of paths and subdivided claws are the 
only graphs T with this property. This implies the following corollary: 



Corollary 6. Assume T is a path or a subdivision of a claw. Then there exists a quantum algorithm that, 
given query access to the adjacency matrix of a simple graph G with n vertices, detects whether it contains T 
as a subgraph in 0(n) queries, except with error probability at most 1/3. 

In Section 5, we prove that the algorithms from Theorem 5 and Corollary 6 can be implemented efficiently, 
in 0(n) time and O(logn) space. 

Proof of Theorem 5. The proof uses the color-coding technique from [AYZ95]. Let T be a star with d legs, 
of lengths l\,...,l& > 0. Denote the root vertex by r and the vertex at depth i along the jth leg by Vjj. 
The vertex set of T is Vt = {r, «i.i, . . . , v\^ x , . . . , Vd,i, ■ ■ ■ , Vd,e d }- Color every vertex u of G with an element 
c(u) £ Vt chosen independently and uniformly at random. For v € Vt, let c (v) be its preimage set of 
vertices of G. We design a span program that 

• Accepts if there is a correctly colored T-subgraph in G, i.e., an injection l from Vt to the vertices of G 
such that c o 4 is the identity, and (t, t') being an edge of T implies that (i(t), i(t')) is an edge of G; 

• Rejects if G does not contain T as a minor, no matter the coloring c. 

If G contains a T-subgraph, then the probability it is colored correctly is at least |Vr| T '=f2(l). Evaluating 
the span program for a constant number of independent colorings therefore suffices to detect T with probability 
at least 2/3. 

Span program. The span program we define works on the vector space with orthonormal basis 

{| S ),|i)}u{| U ,fe):( U ,6)e(c- 1 (r)x{0,...,d})u |J c~ x {v) x {0, 1}} . (3) 

u€V T \{r) 

The target vector is \t) — \s). For u £ c~ l (r), there are free input vectors |w, 0) — \s) and \t) — \u,d). For 
j £ [d] and u £ c (vj^.), there are free input vectors \u, 1) — \u, 0). For j £ [d], there are the following input 
vectors: 

• For i £ [lj — 1], u £ c~ l (vj t i) and u' £ c~ l (vj : i + i), the input vectors |u',0) — |u, 0) and |w, 1) — \u', 1} 
are available when there is an edge (u, u') in G. 

• For u £ c _1 {r) and u' £ c~ 1 {vj.i), the input vector (|«',0) — \u,j — 1)) + (\u,j) — \v! , 1)) is available 
when there is an edge (u, vl) in G. 

For visualizing and arguing about this span program, it is convenient to define a graph H whose vertices 
are the basis vectors in Eq. (3). Edges of H correspond to the available span program input vectors; for 
an input vector with two terms, \a) — \/3), add an edge (|a), |/3)), and for the four-term input vectors 
(|u',0) - \u,j - 1)) + (\u,j) - K 1)) add two "pahed" edges, Qu',0), |«, j - 1)) and (\u,j), \u', 1)). 

Positive case. Assume that there is a correctly colored T-subgraph in G, given by a map i from Vr to the 
vertices of G. Then the target \t) — \s) is achieved as the sum of the input vectors spanned by \s), \t) and the 
basis vectors of the form \u, •) with u £ l(Vt)- All these vectors are available. This sum has a term \j3) — \a) 
for each pair of consecutive vertices \a), \0) in the following path from \s) to \t) in H: 

\s), |t(r),0), |t(vi,i), 0), Kvi, 2 ),0), . . . , \i(v hh ),0), |t(«i A ), 1), |t(«iA-i). !)> • • • . k(«i,i). x )' W), 1), 

|t(«a,i),0), ■ • • , |t(«2,i), 1), |t(r),2), kKi),0), , \i(v d>l ), 1), |t(r),d), \t) . 

Pulled back to T, the path goes from r out and back along each leg, in order. The positive witness size is 
O(l), since there are O(l) input vectors along the path. 

This argument shows much of the intuition for the span program. T is detected as a path from \s) to \t), 
starting at a vertex in G with color r and traversing each leg of T in both directions, out and back. It is not 
enough just to traverse T in this manner, though, because the path might each time use different vertices of 
color r. The purpose of the four-term input vectors (|u', 0) — \u,j — 1)) + {\u,j) — \u' , 1)) is to enforce that if 
the path goes out along an edge (\u,j — 1), |it',0)), then it must return using the paired edge (\u' , 1), \u,j)). 
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Figure 1: An example to illustrate the constructions of the graphs H and H' in the negative case of the proof 
of Theorem 5. (a) A subdivided star T with (^1,^2,^3) = (1, 3, 1). (b) A graph G with vertices labeled by 
their colors, i.e., vertices of T. Although G contains T as a subgraph, the coloring is incorrect and the span 
program will reject, (c) The graph H, edges and paired edges of which correspond to available span program 
input vectors. Vertices of G have been split into two or four parts, and vertices s and t have been added. 
Paired edges are colored blue. Note that s is connected to t in H. (d) The graph H' . New edges are colored 
red. Note that s is disconnected from t. 



Negative case. Assume that G does not contain T as a minor. It may still be that \s) is connected to \t) 
in H. We construct an ancillary graph H' from H by removing some vertices and adding some extra edges, 
so that \s) is disconnected from \t) in H'. Figure 1 shows an example. 

The graph H' is defined starting with H. Let Vj — {Vj t i, . . . , Vj^A, Hj = {\u, b) : c{u) £Vj,b£ {0, 1}} 



and Rj = {\u,j) 



c[u 



r}. For j £ [d] and u £ c 



• Add an edge (\u,j — 1), \u,j)) to H' if \u,j — 1) is connected to Rj in H via a path for which all internal 
vertices, i.e., vertices besides the two endpoints, are in Hj\ and 

• Remove all vertices in Hj that are connected both to Rj-i and Rj in H via paths with all internal 
vertices in Hj. 

Note that in the second case, for each v! € c -1 (K-), either both \u', 0) and \u', 1) are removed, or neither is. 
Indeed, if there is a path from |u',0) to Rj, then it necessarily must pass along an edge (|u",0), \u", 1)) with 
c(u") = Vj } £.. Then backtracking along the path before this edge, except with the second coordinate switched 
<-> 1, gives a path from \u',0) to \u' , 1). Similarly \u',0) is connected to \u' , 1) if there is a path from \u', 1) 
to Rj-i. 

Define the negative witness \w') by (v\w') = 1 if \s) is connected to \v) in H', and (v\w') = otherwise. 
Then \w') is orthogonal to all available input vectors. In particular, it is orthogonal to any available four-term 
input vector (|u',0) — \u,j — 1)) + (\u,j) — \u' , 1)), corresponding to two paired edges in H, because either 
the same edges are present in H' , or |m',0) and \v! , 1) are removed and a new edge (\ii,j — 1), \u,j)) is added. 

To verify that \w') is a witness for the span program evaluating to 0, with ((s| — (i|)|w') = 1, it remains to 
prove that \s) is disconnected from \t) in H' . Assume that \s) is connected to \t) in H' , via a simple path p. 
Based on the path p, we will construct a minor of T in G, giving a contradiction. 

The path p begins at \s) and next must move to some vertex |uq,0), where c{uq) — r. The path ends by 
going from a vertex \ud,d), where c(u<j) = r, to \t). By the structure of the graph H' , p must also pass in 
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Figure 2: Let T be the subdivided star with four legs of lengths t\ = • ■ ■ = £4 = 2. Then the span program 
from the proof of Theorem 5 accepts the colored graph G in (b), even though G contains T only as a minor 
and not as a subgraph. The corresponding graph H is shown in (c), together with a flow that indicates the 
combination of input vectors adding to \t) — \s). Notice that the flow is balanced at all vertices except s 
and t, and also that the flows along paired edges are of equal strengths in opposite directions. 
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cross a new edge added to H' , (|u'-, j — 1), \u'j,j)) for some u'j with c(w^) = r. Thus the path p has the form 
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Based on this path, we can construct a minor for T. The branch set of the root r consists of all the vertices 
in G that correspond to vertices along p (by discarding the second coordinate). Furthermore, for each edge 
(| it'-, j — 1), \u'pj)), there is a path in H from \u'j,j — 1) to Rj, in which every internal vertex is in Hj. The 
first £j vertices along the path give a minor for the jth leg of T. It is vertex-disjoint from the minors for 
the other legs because the colors are different. It is also vertex-disjoint from the branch set of r because no 
vertices along the path are present in H' . Therefore, we obtain a minor for T, a contradiction. 

Since each coefficient of \w') is zero or one, the overlap of \w') with any input vector is at most two in 
magnitude. Since there are 0(n 2 ) input vectors, the witness size is 0(n 2 ). 

By Eq. (2), the span program's overall witness size is the geometric mean of the worst witness sizes in the 
positive and negative cases, or 0(n). □ 

The promise that G does not contain T as a minor is necessary for the correctness of the algorithm; 
see Figure 2. 

Theorem 7. Let T be a collection of vertex- disjoint subdivided stars. Then there exists a quantum algorithm 
that, given query access to the adjacency matrix of a simple graph G with n vertices, makes 0(n) queries, 
and, with probability at least 2/3, accepts if G contains T as a subgraph and rejects if G does not contain T 
as a minor. 

Proof. It is not enough to apply Theorem 5 once for each component of T, because some components might 
be subgraphs of other components. Instead, proceed as in the proof of Theorem 5, but for each fixed coloring 
of G by the vertices of T run the span program once for every component on the graph G restricted to vertices 
colored by that component. This ensures that in the negative case, if the span programs for all components 
accept, then there are vertex-disjoint minors for every component, which together form a minor for T. □ 

Paired edges are more complicated to work with than ordinary edges. For implementing the quantum 
algorithm time efficiently, in Theorem 9 below, we will therefore work with a slightly different span program 
in which the vertices \u, b), for (u, b) £ c~ x {r) x [d — 1], are split in four and the vertices \u, b), for (it, b) e 
c" 1 ^) x {0, d} are split in two. The modified span program computes the same function on allowed input 
graphs G, with nearly the same witness size, but has the advantage that any vertex is incident to at most 
one paired edge. 



4.2 Triangle 

The technique used in the proof of Theorem 5 extends also to other problems. As an example, we consider the 
case that T is a triangle. Although the best known algorithm for detecting triangle subgraphs uses (^(n 1 ' 296 ) 
queries [Bell lb], triangles can be detected in sparse graphs in 0(n 116 ) queries [CK11, Theorem 4.4]. 

Theorem 8. There exists a 0(n)-query quantum algorithm that, given query access to the adjacency matrix 
of a simple graph G with n vertices, accepts if G contains a triangle and rejects if G is a forest, i.e., does not 
contain a triangle as a minor, except with error probability at most 1/3. 

Proof. The algorithm is similar to the one in Theorem 5. Let c be a uniformly random map from the vertex 
set Vq of G to {0, 1, 2}. Define a span program on a vector space with orthonormal basis 

{\s},\t)}U{\u 1 c(u)):ueV G }U{\u,3):uec- 1 (0)} . (4) 

The target vector is \t) — \s). The free input vectors are \t) — \s) + \u, 0) — \u, 3) for u £ c _1 (0). For j £ {0, 1, 2} 
and (u, u') £ c -1 ^) x c~ l (j + 1 mod 3), add an input vector \u',j + 1) — \u, j) that is available if the edge 
(u, u') is present in G. 

If G contains a triangle, then the triangle is colored correctly with probability 2/9. Say the triangle is 
{uq,ui,U2}, with c(uj) = j. Since the sum of the input vectors \t) — \s) + |uo,0) — |mo,3), |ui,1) — |uo,0), 
|u2, 2) — |ui, 1) and \uq, 3) — |u2, 2) equals |i) — |s), the span program accepts. The witness size is 3. 

The intuition for this construction is similar to Theorem 5. By using a four-term input vector \t) — \s) + 
|u,0) — |it, 3) for u £ c _1 (0), instead of two separate input vectors \u,0) — \s) and \t) — |u,3), we prevent the 
span program from accepting paths Uq,ui,U2,u' q with c(u' ) = but u' ^ u . 

Let us make this intuition precise. Assume that G is acyclic. We argue that the span program rejects by 
constructing a negative witness \w'}. Unlike in Theorem 5, the coefficients of \w'} will not be only or 1, and 
the worst-case witness size is 8(?i 4 ). We will prove that the expected witness size is 0(n 2 ). 

Fix arbitrarily a root for every tree component of G, and measure depths from these root vertices. Let H 
be the same graph as G, except with edges connecting vertices of the same color removed. For every tree 
component in H , set the root to be the (unique) vertex in that component with least depth in G. For a 
vertex u, let d(u) be its depth in H. Observe that because G is acyclic, going from G to H every edge is 
removed independently with probability 1/3. Let H' be the same as H but with each vertex u £ c _1 (0) 
split into two vertices (u,0) and (w,, 3), so that (u,Q) is connected to u's neighbors of color 1, and (m,3) is 
connected to u's neighbors of color 2. Also add an edge from (u,0) to (u, 3). H' is acyclic. 

Using the graph H' , we can specify a negative witness \w'). Let (s\w') = 1 and {t\w') = 0. Since the 
vertices of H' are in one-to-one correspondence with the other basis vectors of Eq. (4) , it remains to give 
coefficients for each vertex of H' . Note that for any u £ c _1 (0), the condition that \w') be orthogonal to the 
free input vector \t) — \s) + \u,0) — \u,3) implies that \w'} must satisfy (u,0\w') = (u, 3\w') + 1. Up to an 
additive factor, this condition determines the coefficients of \w') for each connected component of H' . Let 
r be the root of the component. For a vertex u in the component, define the level £(u) as the number of 
((u, 3), (u, 0)) edges minus the number of ((u, 0), (u, 3)) edges traversed along the simple path from r to u. 
Let (u\w') — £(u). Note that £(u) < d(u) + 1 because no two new edges are adjacent. 

Unfortunately, the coefficients of \w') may grow as large as f2(n), resulting in a negative witness size of 
order n 4 . However, the probability of this event is negligible. Indeed, the negative witness size is bounded by 
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because H' has at most 2n vertices. For a fixed v, the expectation of (d(v) + 1) is bounded by the series 
I Si^o(* + l) 2 (2/3) 1 = 0(1). By linearity of expectation, the expected size of the negative witness is 0(n 2 ). 
By a Markov inequality, for any e > one may choose C so that the probability the negative witness size 
exceeds Cn 2 is less than e. This case adds at most e to the algorithm's error probability. If the negative 
witness size is at most Cn 2 then the total witness size is 0(n). □ 
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Figure 3: A skew product of K§ and Z/2Z gives a planar graph that does not contain K§ as a minor. This 
example is due to Jim Geelen. 

4.3 A counterexample for K 5 

The algorithms in Sections 4.1 and 4.2 suggest a general approach for solving the subgraph/not-a-minor 
problem for a graph T: randomly color G by the vertices of T, and construct a span program for a traversal 
of H : using the paired-edge trick to assure that the same vertex of G is chosen for all appearances of a vertex 
of T in the traversal. Natural candidate graphs to consider next include general trees and cycles. In this 
section, however, we show that the approach fails for some graphs T. 

Consider the following operation that is a special case of the skew product of a graph and a group [KP99] . 
Let T be a graph with each edge e marked by s e € Z/2Z. The skew product of T and Z/2Z is the graph 
T 2 with vertices (v, i), where v is a vertex of T and i € Z/2Z. T 2 has two edges for each edge (u, u) of T: 
((it, i), (u, i + S(„.!,))) for i e Z/2Z. Figure 3 shows an example. 

The span program built along the lines of the algorithm from Theorems 5 and 8 accepts on this graph if 
it is colored correctly, i.e., if both vertices (v, 0) and (v, 1) of T 2 are colored by v in T. Indeed, the positive 
witness for G — T 2 can use all available input vectors with uniform coefficients 1/2. 

In general, however, and as shown in Figure 3, T 2 does not contain T as a minor. It is easy to check that 
if T is a tree or a triangle, T 2 does contain T as a minor — and even as a subgraph, in the case of a tree. 

This shows that our algorithm does not work for all subgraph/not-a-minor promise problems. Similarly, 
one can define a (total) minor-closed forbidden subgraph property for which our algorithm fails. The property 
of having as a minor neither K& nor the eleven-vertex path P\i is a forbidden subgraph property. The product 
graph in Figure 3 satisfies this property, but our algorithm will falsely detect a K& subgraph. 

Characterizing the quantum query complexities of minor-closed forbidden subgraph properties is an inter- 
esting problem. Does any minor-closed forbidden subgraph property have oj(n) quantum query complexity? 

5 Time-efficient implementations 

A span program V, on domain T>, can be evaluated by a quantum algorithm that only makes 0(wsizc(V 1 T>)) 
queries to the input string (Theorem 2). The algorithm alternates a fixed, input- independent reflection with 
a simple input-dependent reflection. This structure is inherited from Grover's search algorithm [Gro96]. In 
general, however, the algorithm will not be time efficient, because the input-independent reflection will be 
difficult to implement using local gates. The time-efficient implementation of span programs can be subtle. 
In this section, we show how to use a quantum walk to implement efficiently the input- independent 
reflection for the algorithms of Theorems 3, 7 and 8. Roughly, the quantum walk is on either the complete 
graph or a layered graph with complete bipartite graphs between adjacent layers. Some modifications are 
needed, however, to deal with paired edges. The desired reflection is about the stationary eigenspace of the 
quantum walk. The graph's constant spectral gap allows for implementing this reflection to within inverse 
polynomial precision using only logarithmically many steps of the walk. The graph's uniform structure allows 
for implementing each step efficiently. We will show: 
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Theorem 9. The algorithm from Theorem 3 can be implemented in 0(nyd) quantum time, and the algorithms 
from Theorems 7 and 8 can be implemented in 0(n) quantum time. In these implementations, the algorithms 
from Theorems 3 and 7 use O(logn) bits and qubits of space. 

Intuitively, our span program-based algorithms are similar to running a quantum walk on the input 
graph G. However, G is given only by an input oracle, and implementing a quantum walk on it directly 
would require too many input queries. Instead, we run a quantum walk on a nearly complete graph that 
contains G, and interpolate input queries in order, roughly, to simulate a walk on G. 

In the proof of Theorem 9, we need some basic facts about k-wise independent hash functions; see, 
e.g. [LW06]. This is a collection of functions h m : [n] — > [£] such that for any k distinct elements Oi, . . . , Ofc, 
the probability over the choice of m that (/l m (oi), . . . , h m (a,k)) takes a particular value in [£] h , is £~ h . The 
simplest construction, that suffices for our purposes, is to assume £ < n are powers of two, and define h m as 
the log 2 £ lowest bits of the value of a random polynomial over GF{n) of degree k — 1. Then 0(k\ogn) bits 
suffice to specify h m , from which h m (a) can be calculated in 0(klog n) time. 

We will also need some further background in linear algebra. 

5.1 Linear algebra background 

Results about the product of two reflections have many applications in quantum algorithms. Let A and B 
be matrices each with n rows and orthonormal columns. Let Ha = AA' and Hb = BB^ be the projections 
onto C{A) and C(B), respectively. Denote by Ra = 211,4 — I and Rb = 2IIb — / the reflections about the 
corresponding subspaces, and let U = RbRa be their product. Let D(A, B) = A^B. 

Lemma 10 (Spectral Lemma [Sze04, Jor75]). Under the above assumptions, all the singular values of D(A, B) 
are at most 1. Let cos#i, . . . ,cos9g be all the singular values of D(A, B) lying in the open interval (0,1), 
counted with multiplicity. Then the following is a complete list of the eigenvalues of U : 

• The +1 eigenspace is (C(A)nC{Bj) {C(A) 1 - n C{B)^). 

• The -1 eigenspace is (C(A)flC(B) 1 ) ® [C{A) A - f\C{B)). Moreover, C{A)^f]C{B) = B(herD(A, B)). 

• On the orthogonal complement of the above subspaces, U has eigenvalues e 2%Sj and e~ 2l0j for j £ [£] . 

A consequence of the Spectral Lemma is: 

Lemma 11 (Effective Spectral Gap Lemma [LMR+11]). For 9 > 0, let Pe be the orthogonal projection to 
the span of all eigenvectors of U with eigenvalues e l6 such that \9\ < 0. Then for \u) £ C(A) ± , 

||Pen B | W )||<|||| U )|| . (5) 

We will also use the following simple fact about the spectra of block matrices. For neN, let /„ be the 
n x n identity matrix, and J n the n x n all-ones matrix. 

Claim 12. Fix £ x £ symmetric matrices A and B. For n £ N ; let M n = A <E) I n + -B <E) J n - Then the 
spectrum of M n , i.e., the set of eigenvalues sans multiplicities, is independent of n. 

Proof. Let {|ttj) : i £ [n]} be an orthonormal eigensystem for - J„, with corresponding eigenvalues A^ £ {0, 1}. 
For i £ [n], let M(i) = A + XiB. If \v) is an eigenvalue-A eigenvector of M(i), then |t>)® |uj) is an eigenvalue-A 
eigenvector of M n . These derived eigenvectors span the whole (£n)-dimensional space, and hence the set of 
eigenvalues of M n does not depend on n. □ 

Essentially, the above argument works because /„ and J n /n commute and have spectra independent of n. 
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5.2 Algorithm for evaluating a span program 

For evaluating our span programs, we essentially use Algorithm 1 from [Roil la]. However, this algorithm is 
described for canonical span programs only. A canonical span program is a special case of a span program, 
literally corresponding to the dual of the adversary bound of a boolean function [Rei09, Lemma 6.5]. Although 
it is known that any span program can be reduced to canonical form without cost to the witness size [Rei09, 
Theorem 5.2], general span programs can be easier to work with both in constructing the span program and 
in developing a time-efficient implementation. None of the span programs in this paper are canonical. For 
completeness, we restate the algorithm and prove its correctness for general span programs. The proof uses 
the Effective Spectral Gap Lemma from [LMR+11]. 

The free input vectors can be eliminated from any span program without affecting the witness size [Rci09, 
Prop. 4.10]. They can be useful for implementing the algorithm time efficiently, however, but then must be 
charged for properly, as in the "full witness size" complexity measure from [Rcillc]. To do so, convert free 
input vectors to normal input vectors that are associated with an additional input variable Xq that is fixed 
to 1. It will also be convenient to have some input vectors that are never available, also associated to Xq. 
Henceforth, we do not allow for free input vectors, and both always- and never-available input vectors are 
charged for in the witness size. 

Let V be a span program with the target vector \r) and m— 1 input vectors {|«j)} in R d . Let W\ and Wq 
be the positive and the negative witness sizes, respectively, and let W — \/WqWi be the witness size of V. 
Also let |f) = \r)/a, where a = C\\fW\ for some constant C\ to be specified later. 

Let V be the matrix containing the input vectors of V, and also |f), as columns. Our quantum algorithm 
works in the vector space H — R m , with standard basis elements \j) for j = {0, . . . , m — 1}. Basis vectors \j) 
for j > correspond to the input vectors, and |0) corresponds to |f). Let A be the orthogonal projection 
onto the nullspace of V. For any input x of "P, let Tl x = ^ \j)(j\ where the summation is over j = and 
those indices j > corresponding to the available input vectors on input x. 

Let U = R\Rn, where Ra — 2 A — / and i?n = 2n x — I are the reflections about the images of A and Il x . 
Starting in |0), the algorithm runs phase estimation [Kit95] on U with precision O = c w , and accepts if 
and only if the measured phase is zero. Here C2 is another constant to be specified. 

Theorem 13. Assume C\W > 1. Then the above algorithm is correct and requires 0(W) controlled 
applications of U . In each of these applications, Ra requires no access to the input oracle, whereas R\j can be 
implemented in one oracle query. 

Proof. The statements apart from correctness are trivial. The number of applications of U is equal to the 
inverse of the precision, up to a constant factor [NWZ09] . Note also that the extra space required for phase 
estimation, beyond the space needed to implement U, is logarithmic in the inverse precision. 

Assume that f(x) — 1. In this case, we have to show there is a unit- length, eigenvalue-one eigenvector \u) 
of U having a large overlap with |0). Let \w) be an optimal witness for x, and let \u) = a\0) — ^ ■ Wj\j), 
where Wj is the witness coefficient for the jth input vector. Then Rn\u) = \u), because \w) uses available 
input vectors only. Also, V\u) = a\i) — V ■ Wj\vj) = \t) — \r) = 0, and hence, R\\u) = \u). Thus, \u) is an 
eigenvalue-one eigenvector of U. Note that || J2j w j\j)\\ 2 ^ ^1 = °^ '/^i> hence, \u) = \u)/\\\u}\\ has a large 
overlap with |0) that can be tuned by adjusting the value of C\. 

Now assume f(x) = 0. Let P@ be the projection on the span of the eigenvalues of U with eigenvalues e 
such that |0| < O. We have to prove that ||Pe|0)|| is small. The idea is to apply Lemma 11. Let \w') be an 
optimal witness for x. Let \u) — aV'\w'). Since \u) € C(V'), we have A|u) = 0. Also, \w') is orthogonal to 
all available input vectors, and a(0\w') = 1; hence n^lu) = |0). By Lemma 11, 

IIP ln\ll IIP TT I Ml <r e m mi <r ^ l + a * W ° <r ^V^^ C ^ 
||Pe|0>|| = ||Pen.|«>|| < -|||«>|| < 2C2W < ^ w = ^ . 

The algorithm's acceptance probability can be improved by increasing the value of C^. □ 
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5.3 Implementing R\ 

The reflection Ru can be implemented efficiently in most cases, but implementing R\ is more difficult. Since 
many functions have larger time complexity than query complexity, this should be expected. In this section, 
we describe a general way of implementing R\, which is efficient for relatively uniform span programs like 
those in this paper. 

Essentially, we consider the d x m matrix V as the biadjacency matrix for a bipartite graph on d + m 
vertices, and run a Szegedy-type quantum walk as in [ACR + 10, RS08]. Such a quantum walk requires 
"factoring" V into two sets of unit vectors, vectors |a») <E R m for each row i <E [k], and vectors \bj) € R d 
for each column j = 0, . . . ,TO — 1, satisfying (oi|j) (i\bj) = V(p where V differs from V only by a rescaling 
of the rows. (In general, multiplying V from the left by any non-degenerate matrix, and in particular 
rescaling its rows, does not affect the nullspace.) Given such a factorization, let A = X)iGfdl(N) ® l a *))(*l an d 
B = Sj=o (l^i) ® li))01> so ^-B = V. Let Ra and i? B be the reflections about the column spaces of A 
and B, respectively. Embed 7i into W = R fc (8> R m using the isometry B. Then i?n can be implemented on 
B(H) — C(B) by detecting j from the representation of \i) ® |j) and multiplying the phase by —1 if \vj) is 
an unavailable input vector. R\ can be implemented on B(H) as the reflection about the —1 eigenspace 
of R b Ra- Indeed, by Lemma 10, this eigenspace equals {C(A) 1 - l~l C(B)) © (C{A) n C(-B)- 1 -), or B(kery) plus 
a part that is orthogonal to C(B) and therefore irrelevant. 

The reflection about the —1 eigenspace of RbRa is implemented using phase estimation. The efficiency 
depends on two factors: 

1. The implementation costs of Ra and Rb- They can be easier to implement than R\ directly, because 
they decompose into local reflections. The reflection Ra about the columns of A equals a reflection 
about |oj) controlled by the column i, and similarly for Rb- 

2. The spectral gap around the —1 eigenvalue of RbRa necessary to implement the reflection about the 
— 1 eigenspace. By Lemma 10, this gap is determined by the spectral gap of D(A, B) = A^B = V' 
around singular value zero. 

So far the arguments have been general. Let us now specialize to the span programs in Theorems 3, 5 
and 8. These span programs are sufficiently uniform that neither of the above two factors is a problem. Both 
reflections can be implemented efficiently, in poly-logarithmic time, using quantum parallelism. Similarly, we 
can show that D(A, B) has an f2(l) spectral gap around singular value zero. Therefore, approximating to 
within an inverse polynomial the reflection about the —1 eigenspace of RbRa takes only poly-logarithmic time. 

Proof of Theorem 9. We give the proof for the algorithms from Theorems 5 and 8. The argument for 
si-connectivity, Theorem 3, is similar and actually easier. 

Both algorithms look similar. In each case, the span program is based on a graph H , whose vertices form 
an orthonormal basis for the span program vector space. The vertices of H can be divided into a sequence of 
layers that are monochromatic according to the coloring c induced from G, such that edges only go between 
consecutive layers. Precisely, place the vertices s and t each on their own separate layer at the beginning and 
end, respectively, and set the layer of a vertex v to be the distance from s to c(v) in the graph H for the 
case that G = T. For example, in the span program for detecting a subdivided star with branches of lengths 
{£i, . . . , id}, there are I — 2 + 2 Ylje\d\ i^i ~^~ ■'•) l a y ers i because the s-t path is meant to traverse each branch 
of the star out and back. There are £ = 6 layers of vertices for the triangle-detection span program. 

In order to facilitate finding factorizations {|aj}} and {|6j)} such that Ra and Rb are easily implementablc, 
we make two modifications to the span programs. 

First, the span programs as presented depend on the random coloring of G. This dependence makes it 
difficult to specify a general factorization of V. To fix this, if G has n vertices, add dummy vertices to every 
layer of the graph so that every layer has size n. Fill in the graph with never-available edges between adjacent 
layers, including between the layers of s and t, so that every vertex has degree 2n. If the edges in two layers 
are paired, then also pair corresponding newly added edges; each edge pair corresponds to one never-available, 
four-term input vector. This transformation is equivalent to making the coloring part of the input, in the 
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following sense: if v and v' are vertices in adjacent layers, corresponding to vertices u and u' of G, then the 
(v, v') edge input vector is available if (u, u') is an edge in G and if u and v! are both colored appropriately. 

Second, scale the input vectors corresponding to paired edges down by a factor of y/2. Connect s and t by 
two edges, the first corresponding to the scaled target vector |f) = -(\t) — \s)), and the second a never-available 
input vector y\L — l/a 2 (\t) — \s)). We may assume that a = C\\fW\ > 1. 

It is easy to verify that the span program after this transformation still computes the same function, and 
the positive and the negative witness sizes remain O(l) and 0(n 2 ), respectively. After the modifications, the 
graph H has a simple uniform structure that allows for facile factorization. There is a complete bipartite 
graph between any two adjacent layers. 

We specify a vector \ai) for each vertex i of the graph. For i ^ {s,t}, let \ai) be the vector with 
uniform l/\/2n coefficients for all incident edges. For i <E {s,t}, let \ai) have coefficients l/(av / 2n) and 
y/(l — 1 / a 2 ) / (2n) for the two edges between s and t, and coefficients \j\phi for the other 2n — 1 edges. 
For any edge or pair of paired edges — that is, for each of the input vectors and the target vector — we 
specify a vector \bj). For an ordinary edge j, let \bj) be the vector with -4= (1, — 1) coefficients on the 
vertices connected by j and zeros elsewhere. For a pair of paired edges corresponding to the input vector 
\Vj) = 7j(|*) + 10 — \i") — \i'"))i let \bj) — ^m\ v j)- Then these |aj) and \bj) vectors give a factorization of 

v ' = ^ *•*-, Mm*) = ifcVij = ^divj). 

Let us analyze the spectral gap around zero of D(A, B) = A^B = V' . The non-zero singular values of V 
are the square roots of the non-zero eigenvalues of A = V'V'^ = ^2 i v (^ J^ ■ (i\vj}(vj\i'}}\i)(i'\. We need 
to compute A. A vertex i can be represented by a tuple (k, a) G [£] x [n], where k specifies one of the £ 
layers and a specifies a vertex within the layer. Let A(/c, k') be the n x n submatrix of A between vertices at 
layers k and k' . To calculate A(fc, k'), we consider separately the contributions from all of the different layers 
of input vectors. 

1. Ordinary edges between adjacent layers k and k' contribute |l„ to A(k,k) and A(k',k'), and —4^J n 
to A(fc, k') and A(fc', k). Indeed, for the contribution to A(k, fc), observe that any vertex (fc, a) has n 
incident ordinary edges to layer k' , and each incident edge j contributes a term x-|(i|vj)| = ■}-. There 
is no ordinary edge involving vertices (k,a) and (k,o~') with a ^ a', but for any a, a' € [n], there is 
exactly one ordinary edge j from (fc,er) to (k',a'), and it contributes — ^ to A(/c, k') a . a > . 

Even though s and t are connected by two edges, the same calculations hold for the edges between 
their layers. 

2. Consider a set of paired edges, that go out from layer k\ to fe, and then return from layer k% to k^. 
Each input vector \vj) is of the form 4g(— |(fci, cr)) + \(k 2 ,<J r )) — |(fc 3 ,cr')) + |(/c 4 ,ct))). The four layers 
fci, . . . , &4 are distinct. The contributions of these paired edges to the sixteen blocks A(fc Q , kp) are given 
by the 4x4 block matrix 

fci k2 kz ki 

kl I 8 ™ — to^™ 8^°'™ ~8^ n \ 

I —J- T IT _i T J- T 

K2 8n Jn 8 n 8 n 8n J ™ 

h J- 7 —if Ir -J- 7 

' ? 8ri ™ 8 n 8 ™ 8n J ™ 

u \ _ 1 r J_t _J_T Ir/ 

\ 8 in Sn" 7 ™ 8n Jn 8 J "^ 

Indeed, vertices (fc Q , cr) and (fc Q , cr') are not shared by any paired edges j, i.e., ((k a ,a)\vj){vj\{k a ,o J )) = 
0, unless a = a' . If cr = <j\ then each of n paired edges contributes J-. A similar argument holds for 
A{k\,ki) and A(/c 2 ,fc3), except in these cases the paired edges each contribute — §^. For a e {1,4} 
and /3 e {2,3}, any two vertices (k a ,a), (kp,a') are shared by exactly one paired edge. 

Observe that A is a constant-sized block matrix, where each block is the sum of a constant multiple of /„ and 
a constant multiple of J n /n. By Claim 12, the set of eigenvalues of A does not depend on n. In particular, it 
has an 0(1) spectral gap from zero, as desired. 

We now show that both Ra and Rb can be implemented efficiently. As described earlier, the algorithm 
works in the Hilbert space spanned by vectors \i) ® \j), where j varies over input vectors and the target 
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vector, and i varies over vertices for which (i\vj) ^= 0. A more convenient representation for such pairs (i,j) 
is as a tuple (k, a, r, s) £ [£] x [n] x [n] x {+, — }, where k specifies one of the £ layers, and a, t specify the 
cndpoints of an edge from layer k either to the next layer (if s = +) or to the previous layer (if s = — ). 
This representation works whether j is an ordinary edge or a pair of paired edges. Two additional tuples, 
(1, 1, 0, — ) and {£, 1, 0, +), are needed, though, for j the second edge from s to t, i.e., the never-available input 
vector y/l — l/a 2 (\t) — \s)). The states \k, a, r, s) can be stored using a logarithmic number of qubits. 

We start with the description of Ra- For all i — (k, a) £ [£] x [n] except s = (1, 1) and t = (£, 1), \i) |a,) is 
the uniform superposition of the states {\k, a,r,s) : t £ [n], s £ {+, — }}, so the reflection is a Grover diffusion 
operation. For (k,a) — (1, 1) = s, we perform a slightly different operation. Let F be the Fourier transform 
on the space spanned by {|1, l,r, ±) : t G [n]} that maps |1, f , 1 , — ) to the uniform superposition; let K he & 
unitary on span{|f, 1, 1, — ), |1, 1,0, — )} that maps |1, 1, 1, — ) to (l/a)|l, 1,1,—) + \fl — l/a 2 |l, 1,0, —); and 
let L multiply every phase, except that of |1, 1, 1,— ), by — 1. Then the necessary transformation can be 
implemented as FKLK~ l F~ l . A similar operation works for (k, a) = (£, 1) = t. 

The implementation of Rb is similar. For layers k and k + 1 with only ordinary edges between them, it 
suffices to apply the negated swap to all pairs (\k, a, r, +), \k + 1, r, <j, — )). This can be done in logarithmic 
time. For paired layers, the reflection about \bj)(bj\ is performed in a four-dimensional subspace. 

Finally, for the implementation of Ru we need to clarify the use of the random coloring. One solution is 
to generate random numbers classically, and provide them in the form of an oracle mapping a G [n] to the 
color of vertex a. This requires coherent access to 0(n)-bit string. For Theorem 5, however, one can reduce 
the space complexity to O(logn), by using a C-uniform hash function family from [n] to [C], where C is the 
total number of colors. If necessary, we may assume that n and C are powers of two. C-wise independence 
is enough for the proof. For Theorem 8, this does not work, though, because we need to ensure that the 
negative witness size is small with high probability. 

Consider layer k that corresponds to color c. A vertex (k, a) corresponds to vertex a of G if and only if it 
has color c. Otherwise, it is a dummy vertex. To check whether the edge is available, the algorithm checks 
the layers that it connects. If they are connected by ordinary edges of H, it queries both endpoints to check 
if they have the correct colors. If they do, it executes the input oracle, to check for the availability of the 
edge. If the edge is available, it does nothing. In all other cases, it negates the phase of the state. □ 

6 Algorithm for detecting a star with two subdivided edges 

In the introduction, via a reduction to si-connectivity, we gave an 0(n)-query quantum algorithm for detecting 
the presence of a fixed-length path in an n-vertex graph G given by its adjacency matrix. In this section, we 
generalize the reduction to the problem of detecting as a subgraph a star with two subdivided legs. 

Theorem 14. Fix T a star with two subdivided legs. Then there exists a quantum algorithm that, given 
query access to the adjacency matrix of a simple graph G with n vertices, makes O(n) queries, and except 
with error probability at most 1/3 accepts if and only if G contains T as a subgraph. 

Proof. Let the vertex set of T be Vt — {v%, . . . , Vk} U {wi, . . . , Wd}, where the edges are {(vj, U/+i) : j G 
[k — 1]} U {(vg, Wi) : i G [d]}; the vertex vi is the hub of the star. Without loss of generality, we may assume 
that £ £ {2, . . . , k — 1}. Let c be a uniformly random map from the vertex set of G to Vt- 

Define an instance of st-connectivity by transforming G into a graph H as follows. The vertex set of H is 

{3,t}\Jc~ 1 ({vi,...,vt-i,vt + i,...,Vk})U [J ({u ,...,Ud}l>{nu •■ M€ c _1 ({wi,...,iyd})}J . 

Thus each vertex u £ c~ 1 (u^) is split into 1 + d copies, whereas each vertex /j £ c^ 1 (u>i) is split into |c^" 1 (^)| 
copies. There are 0(n 2 ) vertices total. 

There are free edges (s,u) for every u £ c _1 (ui), and (u,i) for every u £ c~ 1 («/ £ ). For every u £ c~ 1 {vj) 
and v! £ c _1 (w : , + i), if G has the edge (u,u'), then H has the edge either (u,u') if £ £ {j,j + 1}, (u,u' ) 
if £ = j + 1, or (ud,u') if £ = j. Finally, for every edge (u,/i) G c^^ty) x c^ 1 (wi), H has the two edges 
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c 1 (v 1 ) c 1 (v 2 ) c 1 (v 3 ) c 1 (w 1 ) c 1 (w 2 ) c 1 (v 4 ) 



Vl 



■ V . 

V 2 V 3 Vi 




(a) 



(b) 



Figure 4: (a) T a star with one subdivided edge; k = 4, £ = 3, d = 2. (b) The vertices and set of possible 
edges in H for an input with n = 18 vertices colored evenly, i.e., |c _1 (u)| = 3 for all v € Vr- 

(ui—i,/j, u ) and (fi Ul Ui). The total number of possible edges, i.e., input vectors for the si-connectivity span 
program, is |c -1 ({«i, v k })\ +IIfe[fc-i] \ c ~ 1 ( v ])\\ c ~ 1 ( v j+i)\ + 2 |c -1 (^)ll c ~ 1 ({ u 'i})l = 0(n 2 ). An example is 
given in Figure 4. 

If G contains T as a subgraph, there is a positive constant probability that it is colored correctly. Then s 
is connected to t by a path of length k + 2d + 1, and the span program witness size is 0(1). 

If G does not contain T as a subgraph, then the construction guarantees that s is not connected to t. 
Indeed, for there to be a path uq, [x u , tti, . . . , Ud through H, G must have a d-leg star centered at u, and for 
there to be paths from s to uq and from Ud to i, G must further have vertex-disjoint paths of lengths at 
least £ — 1 and k — £ attached to u. The witness size is 0(n 2 ), since there are only 0(n 2 ) input vectors. □ 

Unlike in Theorem 5, the breadcrumb trick of using paired edges is not needed here. The path through G 
induced by a path through H from uq to Ud goes at most one step from the hub vertex u £ c~ l {vi). Instead 
of using paired edges to remember where the path came from, it is therefore enough to make copies of the 
vertices in c~ l ({w\, . . . ,Wd})- Unlike in Theorem 5, no promise on the input G is required for Theorem 14. 
Observe, however, that the derived graph H does have a certain promised structure, which ensures that there 
are only 0(n 2 ) possible edges or span program input vectors, even though H has 0(n 2 ) vertices. 

We omit the details, but it can be shown along the lines of Theorem 9 that this algorithm can be 
implemented in logarithmic space, with only a poly-logarithmic time overhead. 

The same technique as used in Theorem 14, except splitting up every vertex in c _1 ({wi, . . . , Vfc}), works 
to give an 0(n)-query quantum algorithm for the subgraph/not-a-minor promise problem for a fixed "fuzzy 
caterpillar" graph T, having vertices {v\, . . . , Vk} U [J 7G r fe i{wj u, ■ ■ ■ , Wj,^}, and edges {(vj,Vj + i) : j G 
[k — 1]} U {(vj,Wj ti ) : j e [k], i G [dj]}. The algorithm does not solve the subgraph-detection problem for 
this T because the s-t path can zig-zag back and forth between vertices in c~ 1 {vj) and c _1 (vj+i). 
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